Data protection is a matter of trust, and maintaining the trust of our website visitors and customers is important to us, Seibert Group GmbH, Luisenstraße 37-39, 65185 Wiesbaden (hereinafter:“Seibert Group”,“we”,“us”). We respect your privacy, therefore it is important to use to respect and protect the collection, processing and use of your personal data (hereinafter referred to as “data processing activities”). With this in mind, it goes without saying that all personal data processing activities are only carried out in strict compliance with the statutory data protection regulations.

In order to make you feel secure when visiting our websites and using our extranet, we would like to detail in this data privacy declaration how and why we perform these data processing activities. This data privacy declaration applies to the use of the Seibert Group websites and to the Seibert Group applications which can be accessed via our own or external websites and in app stores.

In general, you can use our website without providing personal data. We only receive concrete personal data when website visitors and customers provide us with data of their own volition, for example when making an enquiry via telephone, using an online contact form, logging into our extranet, or purchasing licenses via Seibert Group.

The collection, processing and use of your data is only done for purely internal purposes, e.g. to process and deliver orders, offer services and to perform services, and further improve our offerings, as well as to carry out market research and advertising activities. Data will not be transmitted for purposes other than those mentioned above, in particular, for example, your data shall not be disclosed in return for payment.

Here is some more practical report about how we do privacy and GDPR in our company in a blog post: DSGVO and GDPR – How we seek and obtain customer consent.

This data privacy notice applies to the Seibert Group and draw.io websites and to personal data collected via these websites.

For websites published by other providers, to which we have linked, in particular hyperlinks to social networks and YouTube content, the data privacy notices for those platforms and services apply.

The responsibility for the processing of personal data on these internet pages within the meaning of the general data protection regulation (GDPR) lies with:

Seibert Group GmbH

Luisenstrasse 37-39

65185 Wiesbaden

Represented by: Joachim Seibert, Martin Seibert and Sebastian Martini

Email: datenschutz@seibert.group

Personal data is anything that can be used to identify you, e.g. name, address, email.

4.1.1. Seibert Group only accepts orders when provided with the full name of the ordering company’s contact person, a valid email address to establish and maintain our contractual relationship, and the company’s data and (invoice) address. We require personal data:

• when you contact us
• to process your order
• to conclude and fulfil an agreed-upon contract
• when you use our online communication tools ('Microblogging for Confluence' in the Seibert Group extranet, and the chat tool)
• when you subscribe or unsubscribe to our newsletter

4.1.2. Personal data is stored by Seibert Group in particular for the purpose of establishing and processing contracts. For this purpose, it may be necessary to pass on your personal data to third parties, such as a partner licensor of Seibert Group, who acts on behalf of Seibert Group. These third parties are not authorized to use any data shared with them for purposes other than those as stated in this declaration. Data processing activities are especially necessary in order to grant you access to the Seibert Group “extranet”.

4.2.1. Seibert Group uses information provided by people and companies in accordance with data protection regulations for the maintenance of customer relationships, e.g. by providing information about our similar products (product recommendations) by email, regardless of whether you have subscribed to our newsletter. All legal requirements are strictly observed. You can object to the use of your data at any time without incurring any costs other than the transmission costs according to the base rates.

4.2.2. You can withdraw your consent to personalized analysis at any time in your account settings on customer.seibert.group; see our Customer portal terms and privacy notice for details. If you send a request by email to gdpr@seibert.group, we will delete all information about you from our CRM system. If you are using multiple email addresses, please specify all email addresses to be deleted. You can also instruct us to delete all data except stored email addresses. In this way, we can delete all personal information, but store a note with your profile containing only your email address, indicating that no emails should be sent to these email addresses in the future.

4.2.3. Anonymous tracking can help to improve our own software as well. For draw.io for Atlassian Confluence and Jira, we have decided that we will not transmit any data from the draw.io apps to reach an incredibly high level of data security and privacy. Learn more about the no tracking stance of draw.io here. For Linchpin Intranet, however, we do use the power of anonymous tracking with an opt-out mechanism. Learn more about anonymous tracking in Linchpin here.

As a visitor to our website, you have various rights under the GDPR, in particular, the following articles: 15-18, 20, 21, 77.

You can request access to your personal data that is stored and processed by us. In your request, you should specify your concern to make it easier for us to compile the data.

If the information we have stored about you is not or no longer correct, you can request it be corrected. If your data is incomplete, you can request it be completed.

You can request the deletion of your personal data under the conditions of §17 GDPR. Your claim for deletion depends, among other things, on whether the data concerning you is covered by a right of retention or is still needed for us to fulfill our statutory obligations.

Within the framework of §18 GDPR, you have the right to demand a restriction on the processing of your data.

You have the right to object to the processing of your personal data at any time for reasons arising from your particular situation. This applies, in particular, if we process your data because of a legitimate interest. However, we cannot always comply with this, e.g. if we are obliged to process and store your data in accordance with tax laws for auditing purposes. In this case, however, the data will be blocked for further use and deleted after the end of the statutory retention period.

If you have consented to let us process your data, you have the right to revoke this consent at any time. This does not affect the legality of any processing carried out based on your initial consent until it was revoked.

You have the right to receive the data concerning you that you have provided to us in a structured, common and machine-readable format. If you provided your data with your explicit consent or with a contract, you have the right that we transfer the data to a responsible person specified by you.

If you believe that we have not complied with data protection regulations when processing your data, you can lodge a complaint with a data protection supervisory authority, which will examine your complaint. A list of the addresses of the German data protection supervisory authorities can be found at:

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/addresses_links-node.html

To assert all rights, first register your complaint at:

datenschutz@seibert.group

We are sure that together we can efficiently implement your rights.

6.1. As a service, we offer to send you a newsletter where we keep you up to date with new developments within our company.

6.2. All newsletter registrations made via our websites use a double opt-in procedure in which the recipient validates and confirms their request to receive the newsletter and the correctness of their email address by using an activation link in a confirmation email. For newsletters whose sign-up runs via connect.seibert.group, sections 6.3 to 6.7 also apply.

6.3. When you sign up for such a newsletter, the form sends your email address, the newsletter topic you selected and the website on which the form is located to our server at connect.seibert.group. We then send you a confirmation email. We only add you to the newsletter once you open the activation link in this email and confirm the subscription with a click on the page that follows. The activation link is valid for seven days.

6.4. To be able to prove your consent, we store your email address, the newsletter topic, the website on which you signed up and the times of the confirmation email and of your confirmation. We also log the sending of the confirmation email with your email address and the newsletter topic if you do not confirm, in order to limit repeated sign-ups of the same address. We keep your newsletter subscriptions in our customer portal customer.seibert.group. If you do not confirm your sign-up, we delete the logged data after 30 days. We keep the data proving a confirmed sign-up for as long as your subscription exists and for three years after it ends, and then delete it.

6.5. We send the confirmation email and these newsletters via the Amazon Simple Email Service (Amazon SES) of Amazon Web Services EMEA SARL, Luxembourg, in its Frankfurt am Main data center. Amazon Web Services processes your email address and the content of the email on our behalf and reports permanent delivery failures and spam complaints to us. We exclude such addresses from further mailings.

6.6. The links in the confirmation email and in these newsletters are personal links. They lead to their destination via our short link service seibert.link and via our customer portal customer.seibert.group. In doing so, we record that you opened the link, together with your email address, the destination address, the time and your IP address, and analyze this with the analytics service PostHog (storage in the EU). When the link passes through the customer portal, the cookie “seibert-id” is set in your browser for websites under seibert.group; see our Customer portal terms and privacy notice for details. We do not record whether you open a newsletter. The unsubscribe link is not routed through this tracking.

6.7. When you confirm, we transfer the subscription status of the respective newsletter topic to our CRM system HubSpot, as well as any later unsubscriptions. If HubSpot does not yet hold a contact for your email address, we create one after your confirmation that contains only your email address; an existing contact is left unchanged in this step. For newsletters sent, we also transmit to HubSpot that a newsletter was delivered to you, which links in it you clicked and whether delivery failed permanently.

6.8. The legal basis for the newsletter and for analyzing link clicks under section 6.6 is your consent in accordance with Art. 6 para. 1 lit. a GDPR. We store the proof of your consent on the basis of Art. 6 para. 1 lit. c GDPR in conjunction with Art. 7 para. 1 GDPR.

6.9. You can let us know at any time (even during an ongoing business relationship) that you no longer wish to receive newsletters, offers or informative emails. Each of our newsletters also contains an unsubscribe link; for newsletters under sections 6.3 to 6.7, one click on it unsubscribes you.

7.1. When you visit our website, small text files, called cookies, are stored on your computer which enable Seibert Group to make your visit to our website as pleasant and efficient as possible. Session cookies are used, which are automatically deleted when leaving the website, as well as permanent cookies. Seibert Group uses its own cookies as well as those of third parties (hereinafter referred to as “third-party cookies”). When third-party cookies are used, data processing is carried out by the third-party provider (see section 9 below) and these cookies are often stored for longer periods of time.

7.2. Strictly necessary cookies do not identify you personally. Where you have given your consent, we also use cookies that allow us to recognize you and to link your activity across our websites to your profile, in order to personalize content and offers. Details on this identity-based personalization, its legal basis and how to control or withdraw it are set out in our Customer portal terms and privacy notice. If our website is visited again using the same device, the information in these cookies is accessed.

7.3. Where the integration of cookies is not based on your consent, as per §6.1.1.a. of the GDPR, or to implement or conclude a contract as per §6.1.1.b. of the GDPR, the cookies are integrated based on our legitimate interests in providing modern and efficient applications that enhance the user’s experience as per §6.1.1.f. of the GDPR.

7.4. You may refuse the use of cookies at any time by selecting the appropriate settings on your browser. Already stored cookies can also be deleted from your browser’s settings. Please refer to your browser’s help for details. If you refuse cookies, you may not be able to use some of the features of our website, or only to a limited extent. For consent-based personalization, you can also withdraw your consent at any time in your account settings on customer.seibert.group.

8.1. Whenever you access a Seibert Group web page, data about your internet browser is transmitted and stored in server log files. The following data is collected: date and time of your visit, the name of the web page accessed, your IP address, the referrer URL (the URL of the previously visited page), the amount of data transferred, as well as your browser’s name and version information.

8.2. After you have left the website, your IP address is deleted or anonymized. The anonymization of IP addresses is done in such a way that individual actions and data cannot easily identify a person using personal or professional circumstances, or only with a disproportionately high expenditure of time, money and labor.

8.3. Log files are stored in their anonymous form, which does not allow any conclusions to be drawn about your personal data, and therefore the applicability of the GDPR is excluded.

A central, up-to-date overview of the service providers we use and the third-party services integrated into our websites and applications — including their function, processing location and the safeguards in place — is maintained in our service provider overview.

10.1. Personal data is transmitted securely using encryption. This includes your activities on our website. We use the SSL (Secure Socket Layer) encoding system.

10.2. Our homepage and other systems are additionally protected by technical and organizational measures against the loss, destruction, access, alteration or dissemination of your data by unauthorized persons.

The data collected via enquiries (e.g. via a contact form or email) will be stored for a period of 3 months, unless we have a right or obligation to store your data under other laws.

All periods begin at the end of the month in which your request is processed.

In all other instances, the personal data storage duration is determined based on legal storage rights and obligations (e.g. from commercial or tax law). After this period has expired, the data will be deleted at the end of the month, unless they are necessary for the initiation, execution and termination of a contract and/or we have no legitimate interest in the processing.

Our website contains hyperlinks to other websites that are not under the control of Seibert Group. We do not monitor the content of these websites and have no influence on the content or handling of personal data on these websites.

If you have any questions regarding the collection, processing or use of your personal data, information or to correct, block or delete data - where permitted by law - please contact us:

Seibert Group GmbH

Luisenstrasse 37-39

65185 Wiesbaden

Representatives:

Joachim Seibert, Martin Seibert and Sebastian Martini

Contact: datenschutz@seibert.group

Data protection officer

You can contact our data protection officer by e-mail at dsb@seibert.group, by mail at the above address with the addressee “The Data Protection Officer”.

If you provide your mobile phone number to Seibert Group (for example, through an event registration or booking form), we may send you SMS text messages related to the service you signed up for, such as event invitations, booking confirmations, reminders, and related updates.

14.1. Consent and legal basis. We only send SMS messages to mobile numbers that have been provided voluntarily through an opt-in form together with consent to receive them. No purchase is required. The processing of your mobile phone number for the purpose of sending SMS messages is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. You may withdraw your consent at any time (see §14.3), without affecting the lawfulness of processing carried out on the basis of the consent before its withdrawal.

14.2. Mobile information sharing. The mobile information (phone number, opt-in status, and carrier routing data used solely to deliver your message) you share with Seibert Group as part of SMS opt-in will not be shared with third parties or affiliates for marketing or promotional purposes. Information sharing with subcontractors (such as our SMS delivery provider Twilio, see §14.5) is strictly limited to delivering the SMS messages you have consented to and is not used for marketing or promotional purposes.

14.3. Opting out. You can opt out of SMS messages at any time by replying STOP to any message, or by contacting us at datenschutz@seibert.group. Reply HELP to any SMS for assistance.

14.4. Message frequency and costs. Message frequency varies based on your engagement. Standard message and data rates may apply, depending on your mobile carrier plan.

14.5. Twilio as SMS delivery provider. We use Twilio Inc., 101 Spear Street, Fifth Floor, San Francisco, CA 94105, USA, as a subcontractor to deliver SMS messages on our behalf. We have signed a data processing agreement with Twilio for the processing of data in connection with SMS delivery. Data may be transferred to the USA. This takes place on the basis of Art. 45 GDPR in conjunction with the European Commission’s adequacy decision C(2023) 4745; Twilio is self-certified under the EU–US Data Privacy Framework. Further information on Twilio’s processing of data can be found in the Twilio Privacy Notice.

We reserve the right to change this policy without notice at any time when it becomes necessary due to changes in data protection laws or for corporate reasons.

Link to this page: http://seibert.biz/dataprivacy